This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93827f56-c9ec-4124-bacf-a45611ceda1e.roa
File:                     93827f56-c9ec-4124-bacf-a45611ceda1e.roa (raw, json)
Hash identifier:          igfFStqLSBf9C1iXOXwltkWIdf/MMnM5xJ106XGhnvM=
Subject key identifier:   40:9E:4E:06:64:62:EA:5A:30:A0:A1:AF:BE:C3:C3:4B:9A:E5:CC:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       66ABD9D2568BAED9F45729089762B1C795811069
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93827f56-c9ec-4124-bacf-a45611ceda1e.roa
Signing time:             Fri 05 Dec 2025 01:00:46 +0000
ROA not before:           Fri 05 Dec 2025 01:00:46 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.156.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:d9:d2:56:8b:ae:d9:f4:57:29:08:97:62:b1:c7:95:81:10:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:00:46 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=3d4d82996fe14d833f7e3801a7d902234add5e765defb19a731ca68971e2db71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:39:89:27:b1:dc:08:0a:b7:52:07:35:93:
                    6a:8d:7f:14:4c:d4:c8:21:59:c7:83:b6:4b:b1:c4:
                    40:f6:44:c8:51:b8:5a:5c:dd:a1:5a:c6:b2:bf:59:
                    51:00:4e:cb:1d:1a:cf:4d:71:da:cb:0d:00:13:08:
                    b4:2c:3e:4d:b1:d9:73:3e:5d:d1:d6:ed:f5:02:6d:
                    d6:60:0d:93:b7:5b:50:2b:cb:67:f8:2b:87:ea:8b:
                    f6:2a:03:15:cd:36:db:45:c5:92:d4:78:38:ce:2d:
                    cb:1f:f9:12:cd:ca:45:e1:23:97:2e:7e:f3:87:8c:
                    34:ce:09:f6:65:a3:fc:55:ec:22:e9:9c:24:ec:35:
                    55:7e:b6:60:14:7e:5b:db:fe:87:da:33:17:c5:0b:
                    1e:77:6d:eb:02:79:00:8a:07:e2:41:a7:31:03:19:
                    6f:26:25:7c:c0:fa:d2:6c:c7:9d:76:21:80:b6:11:
                    19:b2:dd:c5:6b:a6:2e:29:07:0c:d7:4e:71:e2:30:
                    79:8d:2b:48:fb:82:29:8c:84:5c:94:8a:ae:08:c4:
                    68:42:1c:27:84:65:20:9a:9c:b5:5c:11:f6:22:ce:
                    65:07:e4:a5:64:7a:74:59:84:c9:96:64:64:fc:b3:
                    32:a0:12:1a:4f:54:6a:6e:d0:3d:d2:36:12:bd:8e:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9E:4E:06:64:62:EA:5A:30:A0:A1:AF:BE:C3:C3:4B:9A:E5:CC:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93827f56-c9ec-4124-bacf-a45611ceda1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.156.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:31:4b:84:e7:e8:b4:94:80:dd:d4:8b:98:7c:22:d2:32:
         6e:07:96:5f:14:c1:c8:c7:21:db:de:e0:be:73:10:e0:83:54:
         f3:b3:2c:4e:8c:48:b5:ec:b5:ff:aa:bd:34:35:8f:11:48:83:
         dd:1f:d3:a8:d6:3e:6c:3c:b8:e1:29:7d:bd:75:3f:60:7b:27:
         6b:5e:29:77:ac:6b:12:75:28:67:c6:9c:a6:a7:03:a4:66:79:
         e8:74:a5:fb:60:f9:07:84:07:66:55:8a:b5:22:cf:66:ec:d4:
         48:ed:a1:b4:d0:ff:53:b7:67:09:0b:06:c2:a8:76:ea:28:dc:
         28:7b:94:9c:2e:e7:de:55:a2:84:b1:30:12:cb:a7:dc:13:f3:
         14:b4:2f:14:6b:ae:df:3a:18:08:93:a5:f9:f5:9e:ec:95:a2:
         0f:ef:1c:d4:15:61:6f:a8:01:3e:33:06:e3:2f:da:9a:be:9b:
         a6:1d:6a:1f:a8:b6:07:52:2d:9e:ae:7d:f8:2b:ed:94:e6:52:
         5d:2a:5d:ff:2c:e3:d1:21:1d:75:0f:86:8e:b3:44:46:be:eb:
         b0:2b:dc:95:09:76:8e:d8:85:9d:76:65:61:bc:bb:35:bd:e2:
         8f:b4:84:e1:fd:59:d6:56:e7:33:29:a9:71:14:9e:9b:71:d3:
         43:cd:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:19:07 2025 by rpki-client